May 1, 2025 update
This commit is contained in:
@ -13,7 +13,6 @@
|
||||
# references must include a dollar sign '$' in front of the
|
||||
# name to be expanded properly.
|
||||
#
|
||||
# $FreeBSD: releng/12.3/sbin/devfs/devfs.rules 338204 2018-08-22 15:55:23Z brd $
|
||||
#
|
||||
|
||||
# Very basic and secure ruleset: Hide everything.
|
||||
@ -87,6 +86,12 @@ add include $devfsrules_unhide_login
|
||||
add path fuse unhide
|
||||
add path zfs unhide
|
||||
add path 'bpf*' unhide
|
||||
add path 'md*' unhide
|
||||
add path 'md*' mode 0777
|
||||
|
||||
[devfsrules_jail_vnet=5]
|
||||
add include $devfsrules_jail
|
||||
add path pf unhide
|
||||
|
||||
# members of group uucp can access all usb and tty devices
|
||||
[usbrules=100]
|
||||
|
@ -13,14 +13,13 @@
|
||||
# For a more detailed explanation of all the periodic.conf variables, please
|
||||
# refer to the periodic.conf(5) manual page.
|
||||
#
|
||||
# $FreeBSD: releng/12.3/usr.sbin/periodic/periodic.conf 370770 2021-10-07 19:46:04Z asomers $
|
||||
#
|
||||
|
||||
# What files override these defaults ?
|
||||
periodic_conf_files="/etc/periodic.conf /etc/periodic.conf.local"
|
||||
periodic_conf_files="/etc/periodic.conf /etc/periodic.conf.local ${_localbase}/etc/periodic.conf"
|
||||
|
||||
# periodic script dirs
|
||||
local_periodic="/usr/local/etc/periodic"
|
||||
# periodic script dirs. _localbase is being set in /usr/sbin/periodic
|
||||
local_periodic="${_localbase}/etc/periodic"
|
||||
|
||||
# Max time to sleep to avoid causing congestion on download servers
|
||||
anticongestion_sleeptime=3600
|
||||
@ -32,6 +31,7 @@ anticongestion_sleeptime=3600
|
||||
# that output. $daily_output might be set to /var/log/daily.log if you
|
||||
# wish to log the daily output and have the files rotated by newsyslog(8)
|
||||
#
|
||||
daily_diff_flags="-b -U 0" # flags for diff output
|
||||
daily_output="root" # user or /file
|
||||
daily_show_success="YES" # scripts returning 0
|
||||
daily_show_info="YES" # scripts returning 1
|
||||
@ -109,9 +109,6 @@ daily_accounting_compress="NO" # Gzip rotated files
|
||||
daily_accounting_flags=-q # Flags to /usr/sbin/sa
|
||||
daily_accounting_save=3 # How many files to save
|
||||
|
||||
# 330.news
|
||||
daily_news_expire_enable="YES" # Run news.expire
|
||||
|
||||
# 400.status-disks
|
||||
daily_status_disks_enable="NO" # Check disk status
|
||||
daily_status_disks_df_flags="-l -h" # df(1) flags for check
|
||||
@ -182,6 +179,11 @@ daily_scrub_zfs_pools="" # empty string selects all pools
|
||||
daily_scrub_zfs_default_threshold="35" # days between scrubs
|
||||
#daily_scrub_zfs_${poolname}_threshold="35" # pool specific threshold
|
||||
|
||||
# 801.trim-zfs
|
||||
daily_trim_zfs_enable="NO"
|
||||
daily_trim_zfs_pools="" # empty string selects all pools
|
||||
daily_trim_zfs_flags="" # zpool-trim(8) flags
|
||||
|
||||
# 999.local
|
||||
daily_local="/etc/daily.local" # Local scripts
|
||||
|
||||
@ -252,7 +254,7 @@ security_show_badconfig="NO" # scripts returning 2
|
||||
# These options are used by the security periodic(8) scripts spawned in
|
||||
# daily and weekly 450.status-security.
|
||||
security_status_logdir="/var/log" # Directory for logs
|
||||
security_status_diff_flags="-b -u" # flags for diff output
|
||||
security_status_diff_flags="-b -U 0" # flags for diff output
|
||||
|
||||
# Each of the security_status_*_period options below can have one of the
|
||||
# following values:
|
||||
@ -301,6 +303,7 @@ security_status_ipfdenied_period="daily"
|
||||
# 520.pfdenied
|
||||
security_status_pfdenied_enable="YES"
|
||||
security_status_pfdenied_period="daily"
|
||||
security_status_pfdenied_additionalanchors=""
|
||||
|
||||
# 550.ipfwlimit
|
||||
security_status_ipfwlimit_enable="YES"
|
||||
|
Reference in New Issue
Block a user